Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199411 7.5 危険 guanxicrm - guanxiCRM Business Solution の modules/webmail2/inc/rfc822.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5096 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
199412 4.3 警告 EGroupware - eGroupWare におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5091 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
199413 6.8 警告 CA Technologies - CA BrightStor HSM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5084 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
199414 10 危険 CA Technologies - CA BrightStor HSM における整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5083 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
199415 10 危険 CA Technologies - CA BrightStor HSM におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5082 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
199416 4.3 警告 egov - eGov Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5078 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
199417 4.3 警告 Alexander Palmo - SPHPBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5072 2012-06-26 15:54 2007-09-24 Show GitHub Exploit DB Packet Storm
199418 7.5 危険 Alexander Palmo - Simple PHP Blog の upload_img_cgi.php における任意のコードを実行される脆弱性 CWE-16
環境設定 		CVE-2007-5071 2012-06-26 15:54 2007-09-24 Show GitHub Exploit DB Packet Storm
199419 5 警告 adam scheinberg - Adam Scheinberg Flip におけるログイン資格情報を含むファイルをダウンロードされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-5063 2012-06-26 15:54 2007-09-24 Show GitHub Exploit DB Packet Storm
199420 7.5 危険 adam scheinberg - Adam Scheinberg Flip の account.php における管理者アカウントを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5062 2012-06-26 15:54 2007-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1711 5.4 MEDIUM
Network 		mozilla thunderbird The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in … NVD-CWE-noinfo
CVE-2025-1015 2025-02-7 07:15 2025-02-4 Show GitHub Exploit DB Packet Storm
1712 3.1 LOW
Adjacent 		- - A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some unknown processing of the component WiFi Password Handler. The manip… CWE-1391
 Use of Weak Credentials 		CVE-2025-1081 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1713 - - - Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol). - CVE-2025-1004 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1714 5.5 MEDIUM
Local 		- - IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation. CWE-248
 Uncaught Exception 		CVE-2025-0158 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1715 3.3 LOW
Local 		- - IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. CWE-209
Information Exposure Through an Error Message 		CVE-2024-56467 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1716 7.1 HIGH
Network 		- - IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or… CWE-611
XXE 		CVE-2024-54171 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1717 - - - A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of user-supplied input in the data query para… - CVE-2025-22992 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1718 - - - Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php - CVE-2024-57599 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1719 - - - Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected i… - CVE-2022-40490 2025-02-7 06:15 2025-02-7 Show GitHub Exploit DB Packet Storm
1720 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t… CWE-787
 Out-of-bounds Write 		CVE-2025-1020 2025-02-7 06:15 2025-02-4 Show GitHub Exploit DB Packet Storm